Security audit
Security checks for vulnerabilities and agentic risk
This is a simple note-taking skill, but users should be aware that it describes storing, syncing, and sharing note content through an unspecified backend.
Only store or share notes you are comfortable sending to the skill's unspecified backend. Look for provider details, privacy terms, and confirmation behavior before using it for sensitive personal, business, or regulated information.
The invocation description is broad enough to capture many generic note-related requests without clearly defining operational boundaries. Overly broad routing can cause the skill to activate unexpectedly, increasing the chance that user data is handled by this skill when the user did not intend it, especially given the skill also advertises syncing and sharing behavior.
The skill promotes syncing notes across devices and sharing notes with other users but provides no warning about privacy, data disclosure, or where note content is stored and transmitted. Because notes often contain sensitive personal or business information, missing disclosure and consent language increases the risk of unintended exposure or transfer of sensitive data.
No suspicious patterns detected.
